Working from the
vsftpd version 2.2.2, there are two options for keeping users in a
Just add users to the
chroot list e.g. (
/etc/vsftpd/chroot_list) that you want placing in a
This will place all local users in a
chroot jail, however, if this is set then the
chroot_list becomes a list of users who DO NOT go in a
Therefore check your list does not contain user
kg if you have
Obviously restart the
vsftpd daemon after making configuration changes.
Excert from man vsftpd.conf
If activated, you may provide a list of local users who are placed in a chroot() jail in their home directory upon login. The meaning is slightly different if
chroot_local_user is set to YES. In this case, the list becomes a list of users which are NOT to be placed in a chroot() jail. By default, the file containing this list
is /etc/vsftpd/chroot_list, but you may override this with the chroot_list_file setting.
If set to YES, local users will be (by default) placed in a chroot() jail in their home directory after login. Warning: This option has security implications, especially
if the users have upload permission, or shell access. Only enable if you know what you are doing. Note that these security implications are not vsftpd specific. They
apply to all FTP daemons which offer to put local users in chroot() jails.
I have configured vsftpd to
chroot users and these are the
/etc/vsftpd.conf settings that I used (
/etc/vsftpd/chroot_list are empty.
Once you get it working, if you want to keep track of
ftp logins, then you can set
session_support=YES and these should then apprear using the
username vsftpd:12025 IP address Tue Oct 14 14:05 - 14:10 (00:05)
username vsftpd:12011 IP address Tue Oct 14 14:04 - 14:05 (00:00)
NOTE - utmp and wtmp support is only provided with PAM enabled builds.